3 ms·
The following sentence seems really wrong: " Setting the X-Frame-Options header can make it harder for an attacker to carry out this attack (by making it impos
by fooyc 13y ago
The following sentence seems really wrong:
" Setting the X-Frame-Options header can make it harder for an attacker to carry out this attack (by making it impossible to put your site in an iframe). "
Even with X-Frame-Options, the browser still makes a request (else, how can it see the X-Frame-Options header ?). X-Frame-Options only prevents display and execution, not requests.
- homakov 13y agowow, so wrong. where did you find that?
- bradleybuda 13y agoYou're absolutely right - I screwed that up. I'll update the README appropriately.